$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8da4d1ff-4d41-3de1-9c08-c5f5167111b8.roa File: 8da4d1ff-4d41-3de1-9c08-c5f5167111b8.roa (raw, json) Hash identifier: MaUWuIxoUFy2bjUjamDQnHNBfl/RA8zMbDURj0iZ6lQ= Subject key identifier: 8F:DC:5E:2C:15:75:49:EA:66:90:5E:AF:A9:A3:DB:18:30:66:DF:B2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6DB3B2D12C5A9679458000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8da4d1ff-4d41-3de1-9c08-c5f5167111b8.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 2001:559:c2f7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:b3:b2:d1:2c:5a:96:79:45:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=5d018cf3-0d16-413a-9889-84eac1a40a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3c:5c:7c:7d:c3:aa:aa:bb:72:50:08:72:fb: cf:53:8b:a1:a5:82:55:46:ad:0b:aa:ec:c0:9c:07: cc:df:53:34:56:a2:eb:6a:25:04:b2:73:05:f7:65: f8:a0:93:ec:c4:54:71:ce:89:e1:ca:d6:ec:04:45: aa:de:92:b5:89:14:c5:2c:f0:62:17:67:5f:37:d3: b6:4f:64:c0:c9:03:78:93:f3:4e:10:a9:5d:4c:27: 14:53:3b:dd:8b:1c:18:c3:43:4f:db:7a:82:11:77: 38:ce:93:45:c5:e6:aa:ea:12:66:80:03:4d:b6:aa: eb:09:ae:16:15:16:ea:a9:2f:fd:a0:79:89:2c:69: e7:63:d3:88:7a:db:bc:a4:93:7c:89:da:d9:a8:09: 1a:cc:fd:c1:e3:e1:5a:2d:77:fc:30:44:56:e5:65: bf:5c:38:cb:a9:e3:7f:46:fb:b9:33:13:e9:aa:d7: bb:f8:11:9f:f8:d7:90:51:02:36:ea:7a:e0:d9:43: 41:bd:3e:45:0d:e7:78:76:a3:36:2a:ec:1e:7c:35: c8:a5:62:c8:a4:dd:ec:9c:50:4c:31:eb:92:88:e2: 8a:9a:ac:95:d0:65:26:6a:54:5d:66:57:fd:94:f6: d5:1b:8e:52:1a:c5:3c:cb:f1:54:a1:4e:f3:40:28: 59:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DC:5E:2C:15:75:49:EA:66:90:5E:AF:A9:A3:DB:18:30:66:DF:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8da4d1ff-4d41-3de1-9c08-c5f5167111b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c2f7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:a9:4e:88:d9:b0:6d:97:52:4a:73:52:8b:9e:cc:80:ca:97: 5f:7b:aa:1f:ab:7c:5a:a3:e5:6a:db:2d:2f:85:07:e0:99:81: 59:90:68:44:d9:75:a6:12:d2:fd:a6:9a:46:3f:a3:b9:0e:14: f2:38:4b:13:8a:87:ec:04:be:40:3d:12:39:e7:0b:95:00:a5: 13:f6:43:e0:46:56:f7:80:ce:05:b0:5f:70:e9:24:c5:10:bf: f9:18:f9:8d:23:60:0c:83:8e:3c:d6:90:82:e9:7c:96:b1:5c: 75:72:e5:f9:aa:48:ab:6e:a4:f3:f6:cf:d8:d2:19:3c:9b:f1: 3b:72:c8:cc:81:19:88:82:4c:22:5f:5f:7d:13:64:82:c9:63: be:0e:3d:fc:d2:26:a1:f1:e0:64:c2:41:64:88:67:c9:61:d0: bd:85:d6:82:12:d5:d4:4c:19:dd:a9:7b:a5:d4:31:c8:b6:16: 6d:13:38:41:b7:9e:06:95:62:34:a3:5e:c1:09:a9:d1:c9:17: 86:69:5a:40:89:c9:7c:eb:a4:ee:8a:08:64:e2:20:cd:a9:71: 74:d8:e1:ad:97:33:f4:ca:d5:a4:72:b9:c8:0a:6f:63:d7:c9: c7:e1:3c:57:90:bc:43:81:b8:cd:88:b6:5a:f5:2d:4d:4e:13: da:12:b5:f5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebbOy0SxalnlFgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NWQwMThjZjMtMGQxNi00MTNhLTk4ODktODRlYWMxYTQwYTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDxcfH3Dqqq7clAIcvvPU4uhpYJVRq0LquzA nAfM31M0VqLraiUEsnMF92X4oJPsxFRxzonhytbsBEWq3pK1iRTFLPBiF2dfN9O2 T2TAyQN4k/NOEKldTCcUUzvdixwYw0NP23qCEXc4zpNFxeaq6hJmgANNtqrrCa4W FRbqqS/9oHmJLGnnY9OIetu8pJN8idrZqAkazP3B4+FaLXf8MERW5WW/XDjLqeN/ Rvu5MxPpqte7+BGf+NeQUQI26nrg2UNBvT5FDed4dqM2KuwefDXIpWLIpN3snFBM MeuSiOKKmqyV0GUmalRdZlf9lPbVG45SGsU8y/FUoU7zQChZ1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI/cXiwVdUnqZpBer6mj2xgwZt+yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGRhNGQxZmYtNGQ0MS0z ZGUxLTljMDgtYzVmNTE2NzExMWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcL3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALSpTojZsG2XUkpzUouezIDKl197qh+rfFqj5WrbLS+FB+CZgVmQ aETZdaYS0v2mmkY/o7kOFPI4SxOKh+wEvkA9EjnnC5UApRP2Q+BGVveAzgWwX3Dp JMUQv/kY+Y0jYAyDjjzWkILpfJaxXHVy5fmqSKtupPP2z9jSGTyb8TtyyMyBGYiC TCJfX30TZILJY74OPfzSJqHx4GTCQWSIZ8lh0L2F1oIS1dRMGd2pe6XUMci2Fm0T OEG3ngaVYjSjXsEJqdHJF4ZpWkCJyXzrpO6KCGTiIM2pcXTY4a2XM/TK1aRyucgK b2PXycfhPFeQvEOBuM2Itlr1LU1OE9oStfU= -----END CERTIFICATE-----Generated at Wed Apr 9 09:19:28 2025 by rpki-client